BSD Portssecurity/barnyard2 1.13_7 GhostBSD
Interpreter for Snort unified2 binary output files
- System
- GhostBSD
- Repository
- GhostBSD
- Maintainer
- [email protected] (as in FreeBSD)
- License
- GPLv2
- Categories
- security
- Package size
- 155.1 KiB, 428.4 KiB installed
Description
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap.
The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base:
\* Parsing of the new unified2 log files.
\* Maintaining majority of the command syntax of barnyard.
\* Addressed all associated bug reports and feature requests arising since
barnyard-0.2.0.
\* Completely rewritten code based on the GPLv2 Snort making it entirely
GPLv2.
This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way.
In the other systems
| System | Port | Version |
|---|---|---|
| GhostBSD | security/barnyard2 | 1.13_7 |
| MidnightBSD | security/barnyard2 | 1.13_2 |
Install
Binary package:
pkg install barnyard2Dependencies
No port depends on this one.
Configuration
No options to configure.
- Service scripts
- none
Message after installing
Read the notes in the barnyard2.conf file for how to configure /usr/local/etc/barnyard2.conf after installation. For addtional information see the Securixlive FAQ at http://www.securixlive.com/barnyard2/faq.php. In order to enable barnyard2 to start on boot, you must edit /etc/rc.conf with the appropriate flags, etc. For the various options available, type % barnyard2 -h after install or read the options in the startup script - in /usr/local/etc/rc.d. Barnyard2 can process unified2 files from snort or suricata. It can also interact with snortsam firewall rules as well as the sguil-sensor. Those ports must be installed separately if you wish to use them. ===> NOTICE: This port is deprecated; you may wish to reconsider installing it: Upstream has been abandoned, and the project is no longer maintained. It is scheduled to be removed on or after 2026-09-30.